CVE-2014-9358 Information

Description

Docker before 1.3.3 does not properly validate image IDs which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) \docker load\ operation or (2) \registry communications.\

Reference

http://www.securityfocus.com/archive/1/534215/100/0/threaded https://groups.google.com/forum/!msg/docker-user/nFAz-B-n4Bw/0wr3wvLsnUwJ